That or it forces companies to instead go for policies that broadly cover all states at once, so basically the strictest part of every state’s laws.

I think this is a good thing. If all the different requirements are too much for a billion dollar company to handle, they should split into 50x 20 million dollar companies that can tailor to each state’s privacy needs.